WordPress Malware Cleanup and Migration

My WordPress site has been compromised: visitors are being redirected to random domains, intrusive pop-ups are appearing, and I’m logging far more failed sign-in attempts than usual. I already have a fresh full backup, so you can work on a copy or restore point right away.

Here’s what I need from you: clean every trace of malware, document what was removed, close the vulnerability that allowed the breach, and then move the site to a new hosting environment without any downtime. Once migration is complete, I’ll want you to verify that the installation is still malware-free, that SSL and permalinks survived the move intact, and that performance hasn’t been impacted.

Experience recovering hacked WordPress installs is essential; your reviews should reflect successful malware removal and post-cleanup hardening. Familiarity with common security plugins, server-side scanning tools, and manual file/database inspection will help you sail through this quickly. Continuous security monitoring setup after the move would be a welcome bonus if you offer it.

Deliverables
• Cleaned WordPress core, themes, and plugins with a brief report of actions taken
• Hardened configuration (updated salts, strict file permissions, login protections)
• Seamless migration to the new server, DNS updated, SSL functioning
• Final security scan results and proof that the redirects, pop-ups, and brute-force attempts have stopped

Please outline your approach, estimated timeline, and any post-migration support you include.